From bdd43f621111ef85cf07e09f830f67e9dbb86b24 Mon Sep 17 00:00:00 2001
From: Airat Arifullin <a.arifullin@yadro.com>
Date: Wed, 13 Dec 2023 15:29:17 +0300
Subject: [PATCH] [#869] object: Pass just CID to chain router
* Do not convert CID from request to native-schema resource
format - this step is unneccessary for APE.
Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>
---
pkg/services/object/acl/ape.go | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pkg/services/object/acl/ape.go b/pkg/services/object/acl/ape.go
index e2a884c96..a431ad252 100644
--- a/pkg/services/object/acl/ape.go
+++ b/pkg/services/object/acl/ape.go
@@ -26,7 +26,7 @@ func (c *apeCheckerImpl) CheckIfRequestPermitted(reqInfo v2.RequestInfo) error {
request := new(Request)
request.FromRequestInfo(reqInfo)
- cnrTarget := getResource(reqInfo).Name()
+ cnrTarget := reqInfo.ContainerID().EncodeToString()
status, ruleFound, err := c.chainRouter.IsAllowed(apechain.Ingress, policyengine.NewRequestTargetWithContainer(cnrTarget), request)
if err != nil {